IBM® Db2 Warehouse native encryption

Db2® Warehouse uses native encryption to secure your data.

The database system encrypts data by using a data encryption key before writing the data to disk. The data encryption key is encrypted by using a master key. You can "rotate" (change) the value of the master key (for example, to comply with a security policy to change the key value on a regular basis) by issuing the following command Docker or Podman command:

docker exec -it Db2wh rotate_db_master_key

podman exec -it Db2wh rotate_db_master_key

Sample output follows:

Last login: Wed Nov 9 21:01:45 UTC 2016
Key successfully rotated